37e6ac72d6e0a6b2c0b49dc708d3f115_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

37e6ac72d6e0a6b2c0b49dc708d3f115_JaffaCakes118
Size

112KB
MD5

37e6ac72d6e0a6b2c0b49dc708d3f115
SHA1

0d8ad18937b4c8ebdd5541f450a3f456a5ed3664
SHA256

91cb49ecee5d7a808228dc5e555d04913d4deec8b3a20203863ec55822ce4acf
SHA512

593e539cba28f98b841427126a5a3df6e8dae6410ce025926944971d366e87ac67baaef3b4f932c0c002cdec59138ad2a87c5f57e680896972f6d53e7c996d30
SSDEEP

3072:Kw0WTpmH2WfU5SHIIRGxEbiKkRorvAr+k2iG:Kw0amWWfU5SwzKkRor4Sk2d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
37e6ac72d6e0a6b2c0b49dc708d3f115_JaffaCakes118

Files

37e6ac72d6e0a6b2c0b49dc708d3f115_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05c834740a9efecae9ce2cb725361c9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
UnlockFile
ExitProcess
LockFile
CreateFileA
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
VirtualAlloc
lstrcatA
lstrcpynA
lstrcpyA
GetCommandLineA

user32

MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ